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HBMQRAHDUM" FQ/Rt Chief > Reggie Cions “Control VDivlaian 

Office of Information Services 




FROM: 


Director of Security 


SUBJECT : 


Classification Justification for 










1* ; Pursuant to ? a request submitted telephonicallyvby- a. • ’V : i 
member of your staff, this will serve as confirmation that I have-, X'A:- 
requested use of the marking "Classified Confidential in the . 
Aggregate" as appropriate to classification of | 

Compliance with Security Regulations. 

-. 1 . _• . • wS. 

. i 2 . I am comfortable with use of the cited marking as a 
.justification for classification. RMD/OIS has advised that the 
marking is valid and your staff has advised that OGC has 
confirmed its legality. I understand further that the marking is 
used sparingly and has not been publicized in the Agency as 
legally acceptable. The latter fact is unfortunate in that it • • •: c ;• 

offers a solution to a serious problem, i.e., publication of 
unclassified papers that permit construction of a mosaic that is 
revealing and damaging In terms of disclosure of intelligence 
sources and methods* The Inspector General has an immediate V*_ 
interes t in this problem and is supported in his ■ concern.. 'by ■•"f-'f 'Ap gyjflm 
Agency officials charged with implementation of an' e£ f active 
counterintelligence program, myself included. Frankly, I see no 
alternative that would not involve violation of the provisions of 
Executive Order 12085. • 




see no 





■ - v~ : *. . M 
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SECURITY 


>,'l 

/‘Ml, 


COMPLIANCE KITH SECURITY REGULATIONS 




SYNOPSIS. This regulation prescribes CIA policy 


regarding compliance with security regulations. It defines 


and identifies responsibilities for 


porting violations and for imposing jjTenalties for| security 
violations . | [ 


a. AUTHORITY. The provisions of this regulation 


are governed by explicit 


authorization by statute and Executive order to protect 


^classified information and intelligenc(Tj sources and methods 


from unauthorized disclosure. The National Security Act of 


1947, as amended , Jprovidesj the Director of Central Intelli- 
gence (DCI) Jw i th the authority^ to terminate [the employment^ 


of any individual unwilling or unable to abide by security 


procedures, regulations, or requirements established as 


protective measures or precautions. By delegation, the 


Deputy Director of Central Intelligence (DDCI) has t n s same 


authority. Other authorities and responsibilities set forth 


in this regulation dealing with sanctions other than dis- 


missal are in keeping with the provisions o. 


V. ] 

A* *New Numbering Series 


.THIS DOCUMENT IS CONFIDENTIAL 
IN THE AGGREGATEj 
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b. GENERAL 

(1)Jj£he Agency] must function in accoidance w i t h 
strict security standards in order to fulfill ius mission 
effectively. The maximum standards of security compatible 
with efficient operating procedures must always be observed 
and practiced, both in CONUS and overseas. In order to 
maintain such security standards, Deputy Directors, Heads o_ 
Independent Offices, and Operating Officials (nereina^er 
referred to collectively as "Agency of f ic ial s " ) fus t} be 
informed of security weaknesses, violations of security 
regulations, or other breaches of security and, as 
responsibility, they£mustj promptly institute remedial 
measures and administer such disciplinary penalties as may 
be warranted. 

(2) This regulation applies to all categories of 
personnel described ini I whose services are performed 


within the united states either in PCS or TDY status. 

(3) Notwithstanding the concept that security is a 
basic command function, nothing in this regulation will be 
a bar to the Director of security making recommendations 
for the termination ^of the employment/ of personnel employee 
byfjho CIA, -as well as the termination of the detail or 
assignment of personnel detailed to or assigned to the 
Clfjfor any violation or series of violations considered 
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sufficiently grave to warrant such n course. Roconr.cnciitions 
for the separation of CIA employees will be consistent with 
the provisions of 


c. POLICY. Agency policy directed toward the 
application of penalties for security violations is governed 
by the uniform sanctions specified in this regulation, 
except when the circumstances associated with a given 
incident or series cf incidents clearly warrant more stringent 
action or, in the existence of mitigating factors, an 
equitable reduction. j ~ The Office of Security will recom- 
mend, pursuant to paragraph e ( 1 ) (g) below, the penalties 
to be applied for violations other than the unintentional 
violation covered in paragraph g{1) (a) (1) below In making 
recommendations, the Office of Security will be guided 
closely by the penalties established in this regulation and 
will suggest other penalties only when circumstances appli- 
cable to a particular case warrant the imposition of a 
more , or less, stringent penalty. Agency officials will 
weigh the recommendations of the Office of Security in 
the same spirit of equity and justice, j Art individual 
found responsible for a security violation will be af- 
forded the opportunity to argue in his or her defense 
prior to the imposition of a penaltyTJ Only the DCI or 
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the DDC I may ef f ect^scparatiorij, except during an individual's 
trial period, when Reparations^ may be effected by the 
Director of Personnel Policy, Planning, and Management 

5X1 (D/PPPM) . I I 

d. DEFINITION. A security violation is any 
breach, deliberate or inadvertent, or Agency security 

policy, regulations, requirements, or procedures. 25X1 

e. RESPONSIBILITIES 

(1) DIRECTOR OF SECURITY. The Director of 
Security or designee is responsible for: 

(a) Investigating all reported security violations 

i 

within the United States, including any neglect in the 
application of security regulations. 

(b) Determining the person or persons responsible 

for such security violations. 

\ 

(c) Determining the seriousness of a security 
violation in coordination with appropriate Agency officials. 

(d) Maintaining records of all security viola- 
tions, whether committed in the United States or abroad. 

(e) Informing the Agency officials concerned Oi. 
any matter affecting the security of their operations. 

(f) Informing the D/PPPM of the names, dates, and 
types of violations in all thirci and :ourth security 
violation cases computed in accordance with paragraph 

g ( 1 ) (b) ( 1 ) below. 
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(g) Submitting /appropriate^ reports and recom 

mendat ions to Agency officials and to the DCI or DDCI . 

(2) OPERATING OFFICIALS AMD HEADS OF INDEPENDENT 
OFFICES. Operating Officials and Heads of Independent 
Offices are responsible for: 

(a) Imposing security violation penalties on 
personnel under their jurisdiction pursuant to recommenda- 
tions from the Office of Security based on the standards 

established by this regulation. 

(b) Notifying the Director of Security in writing 

of corrective and disciplinary action taken in connection 
with security violations, including those reported from 
overseas. 

(c) Submitting — frrr— p- e r - a - a a-e-L i o ivs-. 

/jForms 1 1 5 2J, Request for Personnel Action,/ 
orm 1 1 5 -?r) to the D/PPPM to implement decisions for suspen- 
sion or dismissal o f ^Agency^employ ees jjis well as the ter- 
mination of the detail or assignment of personnel caballed 

or assigned to the C I a| where appropriate. 

(d) Ensuring that cases of actual or possible loss 
or compromise of classified or classifiable material, j^or ar.y 
other breach of security of which they have knowledge^ are 
brought immediately to the attention of the Director ox. 


secur 


: i ty and the^appropr i atej Deputy Director or higher 
authority. 



ccmmfu. -rn tOL . 
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(3) DIRECTOR OF PERSONNEL POLICY, PLANNING, AND 
MANAGEMENT. The D/PPPM is responsible for: 

when 


(a) Implementing the provisions or 
personnel action involving the£separation of CIA employees*/ 
is recommended by the Director of Security or requested by 
an Agency official. 

(b) £p"rocessing requests for personnel actions 
from Agency officials to implement the suspension or 
separation of CIA employees for security violation sTj 

(c) Furnishing the Director of Security with a 
copy of each personnel action involving suspension or 
separation . 

(4) PERSONNEL SUBJECT TO THIS REGULATION. 

Persons to whom this regulation applies are responsible for: 

(a) Constant and unrelenting observance of sound 
security practices £as presented in security indoctrination, 
security education and ' training , and consistent with 
guidance provided by supervision as a command functioij. 

(b) Immediate reporting of any actual or possible 
loss or compromise of classified or classifiable material 
or any other breach of security of which they have know- 
ledge to their supervisor and the security officer of 
their comoonent or the Director of Security. 


25X1 
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f. INVESTIGATION OV SECURITY VIOLATIONS 
(1) All security violations or alleged breacnes of 
security regulations occurring within the United Spates 
be investigated by the Director of Security or designee. I j. 
it is determined that there has been a probable exposure or 
disclosure of classified or classifiable material or in .. or 
mation to unauthorized persons, the Agency orricial having 
primary interest and all other components concerned with the 
information or material will be notified irrme^a t_ely by >-he 
Office of Security in advance of a formal report in order to 
permit prompt action to lessen the effects Oi the security 
breach. The formal report of investigation will include: 

(a) A written report of interview of uhe person(s) 


concerned . 


(b) A finding as to the person or persons 


responsible 


involved . 


(c) A statement as to the degree of compromise 


(d) To the extent appropriate, the security 


violation history of each person found responsible fo. 


:he violation. 


(e) If warranted, recommendations for remedial 


action that should be taken to preclude re~ 
such violations. 


r.ce o 
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(2) The report of tlic inves tiga ti on or a summary 


thereof will be forwarded to the Agency official concerned. 


;ho will inform the Director of Security in writing of the 


disciplinary action taken under the provisions of this 


regulation . 



g. PENALTIES FOR NONCOMPLIANCE. Persons to whom 


this regulation a- pp 1 y - who fail to observe security regula 

/applies/ 

tions and policies or who are found to be responsible for 


security violations are subject to the following admini 
strative actions and, in certain serious cases, to criminal 


prosecution . 


(1) ADMINISTRATIVE ACTION 


(a) Penalties 


(1) The following are penalties for inadvertent 


iecurity violations that concern rail u re to properly 


secure c 


lassified material and do not involve either 


intent or gross negligence. 
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(a) First Violation. Oral reprimand by the 
Operating Official or Head of Independent Office concerned 
or higher authority and warning of possible consequences o^. 
further violations. 

(b^) Second Violation. Written reprimand and 
warning by the Agency official concerned of the possible 

consequences of subsequent violations. 

(c) Third Violation. Suspension without pay ror a 
period of one day and written warning from the D/PPPM as to 

consequences of a fourth violation. 

(d) Fourth Violation. Suspension without pay for 

fi-ve days and a complete review of the individual’s security 

file by the Director of Security who will, i- warranted, 

provide the Agency official concerned with a recommendation 

for a more severe penalty. Such a recommendation may m- 

volve a longer period of suspension without pay up to a 

maximum of 1; won-fey days orfjould result in] termination or 
/20/ ' 

Agency employment or affiliation. 

(2) Failure to promptly report the loss or 


compromise of 
by suspension 
this behavior 


classified information will be penalized 
without pay for five days. Repe--i<-ion o^ 
after imposition of the prescribed penalty 


will lead to termination 


Agenc 


y employment or a 


f f iliationf. 
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(_3) Failure to afford proper protection to 

llassified material either deliberately or out of gross 

/c/ * 

neglect; e.g., unauthorized removal of classified material 

from office to home or any other location not provided with 

approved safeguarding equipment, will be penalized as 

follows: 

(a) Without intent to damage the national security, 
to make public classified material, or to harm the Agency: 

(i) Isolated instances: five days suspension 

without pay. 

(ii) Repeated instances: twenty days suspension 

without pay. Repetition of this behavior after imposition 
of the prescribed penalty will lead to termination£of Agency 

employment or af f iliati o~n| . 

(b) With intent to damage the national security, 
to make public classified material, or to harm the Agency: 
termination of| Agency~j employment or £a^f f iliationj. 

(4) Deliberate revelation of classified 
information or provision of classified information to 
unauthorized persons will be penalized as folio ws . . 

( a) Without intent to damage the national 
security, to make public classified material, or to harm the 

Agency: 

(i) Isolated instances: five days suspension 

without pay. 
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(ii) Repeated instances: twenty days suspension 

without pa y. Repetition of this behavior after imposition 
of the prescribed penalty will lead to termination J o f Agency 


employment or af f iliatio^nj. 


(b) With intent to damage the national 
to make public classified material, or to harm the Agency: 
termination o f ^Agency^ employment or faf f iliationj. 


(b) Exceptions 

(1) Two-Year Provision. In the case of an 
individual who has served two continuous years without a 
security violation of the nature set forth in paragraph 

g ( 1 ) (a)(1), any or all similar violations that he or she 

* 0 * 

committed prior to the commencement of the two-year period 
will be disregarded for purposes of determining whether a 
violation is the first, second, third, or fourth; however, 
they will continue to be a part of the individual's security 
f ile . 


(2) Lesser Penalties. A lesser penalty than 
called for under paragraph g(1) (a) may be imposed if, in the 
judgment of the ^responsiblej Agency official, local operating 
conditions justify such action. This authority may no>_ be 
delegated. Where the prescribed penalty is termination jof 
Agency employment or af f iliatiorj, a lesser penalty can be 
i mp osed only by the DCI or D DC I . 
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(3 ) Substitute Penalties 
(aj Staff Personnel l S f a ' 
Agents). For staff personnel 


Employees and Staff 



(b.) Personnel Detailed or Assigned From Other 
Government Agencies. Where the prescribed penalty is lo^.s 
of pay, the Agency official will invoke a suitable sub- 
stitute penalty. Where the penalty is termination of 
affiliation, such individuals will be returned to their 
parent agency and the D/PPPM,jj.n coordination with the 
General CounselTj will £notifyJthe parent agency £of the 

fw> so that further action will be taken by the 
/separation,/] 

parent agency as the circumstances warrant. 

(c) Contract Personnel. It will be the duty of 
the cognizant Agency official to consider security viola 
tions on a case-by-case basis and to invoke such penalties 
as are considered equitable and compatible with tne coier 
and the terms of the contract. When feasible, the pre- 
scribed penalties set forth in this regulation will be 
included in the contract. 


25X1 
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( 4 ) ^Accountability For and Reporting of Lesser or 
Substitute Penalties^ The fact that a lesser or substitute 
penalty is imposed than called for under paragraph g(.)(a) 
will not be construed as cancelling the violation. Ia all 
cases of lesser or substitute penalties, the report of 
action taken will be forwarded to the Director of Security 
and will contain the circumstances or conditions ,_ha<- 
warrant a lesser or substitute penalty and the penalty 
imposed . 

(c) Special Penalty Provisions. In cases in- 
volving gross negligence or willful noncompliance with 
security regulations, regardless of the security violation 
record of the individual, penalties will be assessed on a 
case-by-case basis in accordance with the seriousness of the 

individual violation. 

(d) Dismissal. It is recognized that a single 
security breach may be serious enough to warrant the 
separation of the individual from the Agency. Similar 
action also may be warranted in the case of a chronic 
offender. In such cases the Agency official concerned 
advise the Director of Security of intent and forward 
requests for dismissal to the D/PPPM with necessary papers 
associated with the case. The D/PPPM will furnisn aie 
Director of Security a copy of the personnel action 
accomp 1 i she d . 
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(2) CRIMINAL PROSECUTION. Appropriate cases will 
be ^forwardedjto the Department of Justice by the General 
Counsel for prosecution under the espionage laws and other 
pertinent statutes. | | 

h. IMPOSITION OF PENALTIES 

(1) The Agency official concerned will effect the 
impo s ition of security penalties or, when the penalty in- 
volves a personnel action or criminal prosecution, will 
address recommendations to the D/PPPM. The Agency official 
will provide written notification to the Director of 
Security of proposed and effected actions taken in each 


case . 


(2) Requests for suspension or separation will be 

and forwarded to the 


prepared in accordance with 


D/PPPM with all pertinent papers attached, for action 
indicated. The D/PPPM may choose to obtain a recommendation 
from the Director of Security and will furnish the .Director 
of Security a copy of the personnel action effecting the 
suspension or dismissal. 


DISTRIBUTION: AB 


Approved For Release 2004/05/05 : CIA-RDP84BQ0890R000400070022-5 . 

CoM F 1 0 OMTt lP.~ I'-, 


25X1 



